Improve company productivity with a Business Account.Sign Up

x
?
Solved

the system administrator has set policies to prevent this installation

Posted on 2014-01-01
13
Medium Priority
?
632 Views
Last Modified: 2014-01-23
hi i am getting ready to upgrade my win 2003 domain to a win 2008 domain but have one issue i cannot seem to resolve.

i am running a 'ris server' with multiple xp images ok.

i have also now created an image via 'risetup.exe' onto my ris server just like i did with with 1st xp flat image.

the issue i have is that i 'pre-staged' a machine by adding the 'hostname & mac address' via my master dc aduc.

i then successfully received my win 2003 image installed onto my secondary domain member server.

when i logged on, it only allowed me to logon to the domain and 'no local user account was created' which was expected.

i then attempted to install sp2 but this would not install showing the below:

"you do not have permission to update win server 2003"

i decided to create a local 'admin' account and then logged on locally & installed sp2 successfully

i then logged onto the secondary domain member server and attempted to install 'isa 2006', but it prompts a message:

" is that after installing 'win 2003' image onto another server"

note:  as i am not using 3rd party software there was no requirement to use: sysprep in order to select 'generalize' - as advised previously.

so have used 'riprep.exe' for my xp.

question 1.  does anyone know if there is a way to resolve this as i have tried 'delegation, batch job, service, via my gpo and that appears not to resolve my issue  ?

possible resolution:

it maybe the proper way but i am not sure, so i was thinking about 'not pre-staging' my win 2003 domain member server and just installing and adding a new name later, to see if that rectifies my problem - but i have not tried that yet  ?
0
Comment
Question by:mikey250
  • 7
  • 6
13 Comments
 
LVL 27

Accepted Solution

by:
Jason Watkins earned 2000 total points
ID: 39750131
What is the benefit of pre-staging? Are you trying to automate the process of naming the host after RIS images it? I would add server to the domain manually.
0
 

Author Comment

by:mikey250
ID: 39750152
hi i realise my main thread did not show the exact message:

note: i am aware i could have used the 'setup manager' to do the below but thought i would try the below:

i just assumed that if i wish to take control of machines i thought 'pre-staging' was one method of doing things but did not realise the issue i would have via domain admin account installing sp2 and did not realise the issue via the domain admin account when installing isa 2006 receiving the below message:

"the system administrator has set policies to prevent this installation"

i would like to know if the above can be put right, unless there was a specific 'update' to fix those issues above.

as a way round i have i have now removed the server from the domain although i had to logon locally to do that as when logged onto the domain, it would not allow me to do that due to it also being dimmed out.

so i have now rebooted the server and just completed a new image install without using the 'pre-staged' functionality and i have also attempted to install isa 2006 which all appears ok.  so i am now continuing to install sp2 before i do install isa 2006.
0
 
LVL 27

Assisted Solution

by:Jason Watkins
Jason Watkins earned 2000 total points
ID: 39750180
Pre-staging is good, that's what we do where I work. The error looks like a GPO result from a software restriction policy more than anything.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 

Author Comment

by:mikey250
ID: 39750230
hi i only installed via ris image win 2003 & attempted to install 'win 2003 sp2 manually & then isa 2006 manually & not via gpo\computer config\software installation\ for isa 2006.

if 'pre-staging' is good, what do i do to resolve the issue i have  ?
0
 
LVL 27

Assisted Solution

by:Jason Watkins
Jason Watkins earned 2000 total points
ID: 39750237
Is there a domain user account that RIS uses to set up the image? (Pardon me. It has been a while since I've worked with RIS). Try doing the install under that account. Also, does the install process place the server in any OU that might have a restrictive GPO applied?
0
 

Author Comment

by:mikey250
ID: 39750240
currently i am only using 'administrator domain' account for everything & yes my 'isa 2006 firewall' is in an 'ou/gpo' for 'windows updates' etc via gpo\computer config & user config - only, so everything is syncing.
0
 
LVL 27

Assisted Solution

by:Jason Watkins
Jason Watkins earned 2000 total points
ID: 39750245
I'd take the ISA server out of its final OU for updating, install SP2, then put it back. See if that works.
0
 

Author Comment

by:mikey250
ID: 39750252
what i have been doing is installing image successfully, which locates by default the computer in the computer container via aduc and then logging on master dc 'aduc' and 'moving' isa 2006 to 'ou'

so are you saying install image & sp2 in aduc computer container & then 'move' to 'ou' & install 'isa' manually as usual  ?
0
 
LVL 27

Expert Comment

by:Jason Watkins
ID: 39750256
Right
0
 

Author Comment

by:mikey250
ID: 39750264
ok, i might give that ago tomorrow because as i mentioned earlier i have currently 'deleted' the 'pre-staging' and installed image without 'pre-staging' so once i have confirmed i can install 'isa' as expected i will 'pre-stage' again and take your advice as it is good to know.

if it fails, any other suggestions, or maybe i should install, image & sp2 & isa in the aduc computer container 1st then 'move' to specific 'ou'  ?
0
 
LVL 27

Assisted Solution

by:Jason Watkins
Jason Watkins earned 2000 total points
ID: 39750268
How often do you install Windows Server? RIS is a convenient solution for deploying multiple client operating systems, am unsure if it is applicable to servers. I've always ever installed servers manually as they have all wound-up being different. Installing into the default 'Computers' folder is fine as it only inherits the domain GPO there and isn't subject to the specialized GPO's one may encounter in sub-OU's.
0
 

Author Comment

by:mikey250
ID: 39750279
yes i realise ris is a convenient solution for deploying client os, but just wanted to know how to do it and then that was the end of the task as i already have all my xp images located on my ris server.

once done i can eventually upgrade to wds and move master dc to win 2008.

appreciated for that advice and will let you know sometime tomorrow.
0
 

Author Closing Comment

by:mikey250
ID: 39803379
thanks for the advice.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

606 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question